Detects VPN connection attempts based on the VPN domain pattern group.
Overview
| Type | Stream |
|---|---|
| Referenced objects | Pattern group VPN 도메인29 |
Query
1| matchsig field=domain guid="c36305ba-3804-48f2-b26c-efef90213d1f" verify=f
2| eval result = strjoin("\n", foreach(valueof(_1, "rule"), _matchsig_result)) | fields - _matchsig_result